Back

Definition
Risk-based authentication is a login security method that evaluates risk before deciding what level of verification is needed. It may assess device, location, IP address, user behavior, account history, and the sensitivity of the requested action.

Why it matters
Risk-based authentication matters because it helps balance security and user experience. Trusted, low-risk logins can stay simple, while unusual or suspicious attempts can trigger stronger checks before access is granted.

Example use case
A user signs in from their usual phone and location, so the app allows access normally. When the same account logs in from a new country, the system asks for an additional verification step.